feat: set oidc attribute condition (#22)

johanneswuerbach · web-flow · commit ee1ffa8854aa · 2024-04-13T00:38:24.000+02:00
diff --git a/examples/with-backstage/gcp-github.tf b/examples/with-backstage/gcp-github.tf
@@ -27,6 +27,7 @@ module "gh_oidc" {
     "attribute.repository"       = "assertion.repository"
     "attribute.repository_owner" = "assertion.repository_owner"
   }
+  attribute_condition = "attribute.repository_owner == \"${var.github_org_id}\""
   sa_mapping = {
     (google_service_account.sa.account_id) = {
       sa_name   = google_service_account.sa.name

Original file line number	Diff line number	Diff line change
`@@ -27,6 +27,7 @@ module "gh_oidc" {`
`27`	`27`	`"attribute.repository" = "assertion.repository"`
`28`	`28`	`"attribute.repository_owner" = "assertion.repository_owner"`
`29`	`29`	`}`
	`30`	`+ attribute_condition = "attribute.repository_owner == \"${var.github_org_id}\""`
`30`	`31`	`sa_mapping = {`
`31`	`32`	`(google_service_account.sa.account_id) = {`
`32`	`33`	`sa_name = google_service_account.sa.name`